CN112417403B - Automatic system authentication and authorization processing method based on GitLab API - Google Patents

Automatic system authentication and authorization processing method based on GitLab API Download PDF

Info

Publication number
CN112417403B
CN112417403B CN202011368199.5A CN202011368199A CN112417403B CN 112417403 B CN112417403 B CN 112417403B CN 202011368199 A CN202011368199 A CN 202011368199A CN 112417403 B CN112417403 B CN 112417403B
Authority
CN
China
Prior art keywords
gitlab
user
authentication
login
api
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011368199.5A
Other languages
Chinese (zh)
Other versions
CN112417403A (en
Inventor
岳才杰
许浩
陶家顺
李思宁
王琳
王龙
高玮徽
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Suzhou Research Institute Institute Of Electronics Chinese Academy Of Sciences
Original Assignee
Suzhou Research Institute Institute Of Electronics Chinese Academy Of Sciences
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Suzhou Research Institute Institute Of Electronics Chinese Academy Of Sciences filed Critical Suzhou Research Institute Institute Of Electronics Chinese Academy Of Sciences
Priority to CN202011368199.5A priority Critical patent/CN112417403B/en
Publication of CN112417403A publication Critical patent/CN112417403A/en
Application granted granted Critical
Publication of CN112417403B publication Critical patent/CN112417403B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44Program or device authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/602Providing cryptographic facilities or services

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Storage Device Security (AREA)

Abstract

The invention provides a system automatic authentication and authorization processing method based on a GitLab API, which maps a local account and a GitLab system account, and adopts the unified user information data of the GitLab system to complete the synchronization of user information and operation data; acquiring account information input by a user through a login module, processing a login request, including authentication request filtering and identity construction, and generating a Token corresponding to the user; and simulating GitLab login to obtain user authentication information, storing the user authentication information in Cookies, and carrying out access and operation on the API corresponding to the GitLab by combining with the Token of the corresponding user to realize all functional operation and expansion of the GitLab. On one hand, the problem that the customized and expanded functional API has no authentication information is solved; on the other hand, the frequency of manual participation is reduced, the authentication and simulation processing processes are all automatic, the processing efficiency is improved, and the operation risk is reduced.

Description

Automatic system authentication and authorization processing method based on GitLab API
Technical Field
The invention relates to the field of software development and application, in particular to a system automatic authentication and authorization processing method based on a GitLab API.
Background
With the improvement of software development technology and means, 80% of internet companies tend to agile development management modes, and corresponding DevOPS systems or platforms are developed, most of the DevOPS platforms adopt third-party open platform-based APIs for integration and customization transformation, and GitLab is one of the best practice tools for CI/CD, has more complete APIs, and becomes the first choice for DevOPS practice and platform development of large companies.
In conducting open platform integration or development by third parties, two problems generally need to be solved: framework integration and rights authentication issues. The system framework is used as a hard condition for platform integration of the DevOPS platform, and is a basis for deep customization and transformation of the platform. Under the condition of not changing the original framework, the integration and the transformation are mostly carried out by adopting an API-based mode, the unified encapsulation of data resources is completed, and a complete ecological system is constructed. However, in the process of integrated modification and development and encapsulation of the API, resource access limitation of the API becomes a primary problem, OAuth is often used as an important mechanism for mutual trust and communication between users and third-party applications and open platforms, and provides a method for accessing protected resources on behalf of resource access owners for clients, which is usually accomplished by constructing Token, and Token is used as a unique credential for system resource access, thereby completing access authorization of API functions. Moreover, some platform extension functions or customized functions cannot be completed through the API and require user information authentication, and another method is required: and (4) simulating login. Simulated login is generally used as a means for acquiring restricted network resources, and is used for simulating the process of accessing service resources by a user login behavior through a program. Two processes are typically involved: (1) and analyzing and acquiring parameters required by logging in a target system, wherein the parameters are mainly parameters for interaction between the request head and the browser and between the Body and the browser. (2) And simulating the system login behavior by the program, and storing the authorization certificate. However, when platform building is performed based on the GitLab API, OAuth-based authentication is mostly adopted, the authentication process is complex, manual intervention is needed to ensure normal authentication, and a set of complete and automatic authentication system is difficult to form. Furthermore, the GitLab itself does not provide an authentication API based on user Session, and there is a certain resource authentication problem when customizing and extending functions based on the platform.
Disclosure of Invention
The invention aims to provide a system automatic authentication and authorization processing method based on a GitLab API, which solves the problems that more configuration and more manual intervention are required in the traditional authentication based on the oAuth, and the problem that the function development and expansion based on an open platform API can not meet the requirement of platform customization.
The technical solution for realizing the purpose of the invention is as follows: a method for automatically authenticating and authorizing a system based on a GitLab API comprises the following specific steps of performing login authentication and processing on a user based on a Security authentication framework, and acquiring authentication authority by combining a simulated login mode:
step 1, mapping a local account and a GitLab system account, and completing synchronization of user information and operation data by adopting unified user information data of the GitLab system;
step 2, acquiring account information input by a user through a login module, processing a login request, including authentication request filtering and identity construction, and generating a Token corresponding to the user;
and 3, simulating GitLab login to obtain user authentication information, storing the user authentication information in Cookies, and carrying out access and operation on the API corresponding to the GitLab by combining with the Token of the corresponding user so as to realize all functional operation and expansion of the GitLab.
Further, in step 1, mapping the local account with the GitLab system account, and using the unified user information data of the GitLab system to complete the synchronization of the user information and the operation data, the specific method is:
(1) Establishing a user mapping table
Storing a GitLab user information core field in a local library table for user login authentication and information synchronization, wherein the structure of the table is as follows:
TABLE 1 user mapping table
Figure BDA0002805553930000021
The user name is a legal system user name and is consistent with a GitLab user login name, password is a secret key for logging in the system and obtaining GitLab Token, role is a role during user login and is bound with the system authority, and when the legal Token and the corresponding role are held, the role is used as a certificate for accessing GitLab system resources;
(2) User information synchronization
When the user information changes, the GitLab API user interface and the local interface are called to synchronously update the GitLab user information and the local user information, and the consistency of the data of the GitLab user information and the local user information is ensured.
Further, in step 2, acquiring account information input by the user through the login module, processing the login request, including authentication request filtering and identity construction, and generating Token corresponding to the user, wherein the specific method is as follows:
(1) Authentication request filtering
The method comprises the following steps of carrying out user authentication and authorization by adopting a Spring Security framework, controlling access of authority by setting a login and access interceptor, further ensuring the safety of API access, and mainly carrying out request resource authentication through the following filters:
1) Usernamespasorsdauthcationnfilter: the method mainly takes charge of the authentication of the form;
2) Basicauthenitionnfilte: the method mainly takes charge of basic authentication of spring security default;
3) ExceptionTranslationFilter: jumping to a corresponding page based on the thrown error;
4) Filter SecurityInterreceptor: the method comprises the following steps of determining whether a background interface can be accessed according to configuration if the background interface is a filter type;
(2) Identity construction
In order to ensure the safety of the functional operation of the system platform, different users and roles have different GitLab access authorities, a Token of a corresponding user is generated by accessing the GitLab API through a system user name and a password, and the user accesses other functional APIs of the GitLab based on the Token, namely the operation is carried out by using a native authority system of the GitLab.
Further, in step 3, a GitLab login is simulated to obtain user authentication information, and the user authentication information is stored in Cookies, and the specific method is as follows: when the browser accesses the webpage, the data required by login are constructed, forged data are carried to send a login request, after the verification of the server is successful, the Session ID is returned, the Session ID is stored in the Cookie of the client, the Cookie is taken in each request, the maintenance of the Session state is realized, and the authentication of the user authority and the access of corresponding resources are further realized.
Further, cookies and authentication information are cleared when the user logs out.
A GitLab API-based system automatic authentication and authorization processing system is used for carrying out GitLab API-based system automatic authentication and authorization processing based on the method.
A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the method for a GitLab API based system automated authentication and authorization process when executing the computer program.
A computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method to perform a GitLab API-based system automated authentication and authorization process.
Compared with the prior art, the invention has the remarkable advantages that:
1) The problem that Session authentication of a user is needed when an open platform (GitLab) performs function development and customization based on the API is solved, the operation authority of the corresponding user is obtained through simulation authentication, and then actual function API operation is performed.
2) The steps of the platform or interface authentication process of an open platform (GitLab) in the actual development operation and the frequency of user intervention are reduced, all the steps are completed in the information authentication and automatic processing in the login process, the safety is improved, and the research and development cost is reduced.
3) The user does not need to pay attention to parameter transmission or data encryption in the login authentication and authorization process of the system, all the steps are completed by an automatic authentication processing framework, and the problems that Cookie cannot be shared across domains and the system is unstable due to the existing simulation login method are solved.
Drawings
FIG. 1 is a system user map of the present method;
FIG. 2 is a schematic representation of the simulated certification process of the present method;
FIG. 3 is an auto-login process diagram of the present method;
fig. 4 is a general flow diagram of the method.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.
The invention relates to a system automatic authentication and authorization processing method based on a GitLab API (graphical user interface), which is used for carrying out login authentication and processing on a user based on a Security authentication framework and acquiring authentication authority by combining a login simulation mode. Firstly, mapping between a system/platform user and a GitLab service user system is completed; then the user inputs account information through a login module, the request is sent to an authentication processing server, the server processes the received login request, the authentication request is filtered and the identity is constructed, and GitLab login is simulated to obtain authentication information of the GitLab login, and the authentication information is stored in Cookies; meanwhile, a user Impersonation Token is constructed by combining user information, access and operation of an API corresponding to the GitLab are carried out, and all functional operations and expansion of the GitLab are realized. When the user logs out, cookies and authentication information are removed, and the safety of the user is ensured.
1. System user mapping
When platform development or function expansion is performed based on the open platform API, in order to ensure the correctness of obtaining the data resources and the related information of the open platform, a local account needs to be mapped with a GitLab system account, and the synchronization of user information and operation data is completed by adopting unified user information data of the GitLab system, as shown in fig. 1, the method includes the following two steps:
(1) Establishing a user mapping table
Storing the core field of the GitLab user information in a local library table for user login authentication and information synchronization, wherein the structure of the table is as follows:
Figure BDA0002805553930000051
the username is a legal system username and is consistent with the login name of the GitLab user, password is a secret key for logging in the system and obtaining the GitLab Token, role is a role during user login and is bound with the system authority, and when the legal Token and the corresponding role are held, the role is used as a certificate to access the GitLab system resource.
(2) User information synchronization
When the user information changes, the GitLab API user interface and the local interface are called to synchronously update the GitLab user information and the local user information, so that the data consistency of the GitLab user information and the local user information is ensured, and the login authentication safety of the system can be ensured.
2. Security authentication and authorization mechanism
Because a system or platform developed based on the GitLab API needs to protect Web resources, a Filter mechanism is generally adopted, and an Aspect Organized Programming (AOP) is generally adopted for protection of an API-based calling method. The invention adopts Spring Security framework to carry out user authentication and authorization, controls the access of authority by setting login and access interceptor, and further ensures the safety of API access.
The requested resource authentication is mainly performed by the following filters:
1) Usernamespasorsdauthcationnfilter: mainly responsible for the authentication of the form.
2) Basicauthenitionnfilte: mainly responsible for the default basic authentication of SpringSecurity.
3) ExceptionTranslationFilter: and jumping to the corresponding page based on the thrown error.
4) Filter SecurityInterreceptor: is of the filter class and determines whether the background interface is accessible according to the configuration.
In order to ensure the safety of the functional operation of the system platform, different users and roles have different GitLab access authorities, a Token corresponding to each user is generated by simulating the access of the system user name and the password to the GitLab API, the user accesses other functional APIs of the GitLab based on the Token, namely the GitLab native authority system is used for operation, and the safety of the platform for operating the GitLab through the API is ensured.
The specific process is shown in fig. 2: firstly, a user only needs to input a correct user name and a correct password in a browser, a corresponding authentication server can inquire user information and roles, a simulation Token for accessing and operating a GitLab API is generated, the GitLab authentication information is obtained by a method for simulating logging in the GitLab server, all functions of the GitLab can be operated by combining the Token and the Cookie, and function expansion and customization of the platform are realized.
3. Simulating a login process
The client accesses a platform or system service developed based on the GitLab API, the server records sessions through Session objects, and the server can designate a unique Session ID as a cookie to represent each client for identifying the next request from the client.
When a webpage is accessed through a browser, data required for login are constructed, a login request (such as Token or identification, user-Agent/HOST/refer and the like) is sent with forged data, and after the login request is successfully verified by a server, the Session ID is returned, and the Session ID is stored in the Cookie of a client. And the Cookie is carried in each request, so that the conversation state can be kept, and the authentication of the user authority and the access of corresponding resources are realized. When the user logs out, cookies and authentication information are removed, and the safety of the user is ensured.
The specific process is shown in fig. 3: firstly, a user inputs login account information, a GitLab user simulation data is constructed, a request header and a POST request form are constructed, a login request is sent, a processing server is identified, the login request is processed to simulate a Gitlab login process, and Gitlab authority authentication information _ Gitlab _ session is obtained and stored in Cookie to carry out API function operation and authority authentication.
The invention also provides a system automatic authentication and authorization processing system based on the GitLab API, and the system automatic authentication and authorization processing based on the GitLab API is carried out based on the method.
A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the method for a GitLab API based system automated authentication and authorization process when executing the computer program.
A computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method to perform a GitLab API-based system automated authentication and authorization process.
Examples
To verify the validity of the inventive scheme, the following simulation experiment was performed.
(1) The user fills in login information (user name and password), and the login information is encrypted and transmitted to the server to verify the basic information.
(2) After the verification of the basic information, initializing the request information, constructing a request Header (including information such as refer/Host/User-Agent), encrypting and sending a login authentication request.
(3) And (4) intercepting the URL through a predefined filter, and returning to the step (1) if the next step is performed and the rule is satisfied.
(4) And performing resource request authentication processing through the authentication server, automatically verifying and acquiring user role information, generating an Impersonation Token corresponding to the user, storing the Impersonation Token in the Session, and updating a local user base table.
(5) Constructing a request body (comprising a login, a password, an authentication _ token and an utf 8), calling a login interface (http:// ip/users/sing _ in) of the GitLab, performing simulated login authentication, acquiring an experience _ subject _ id and a _ GitLab _ session value of the current user accessing the GitLab, and storing the experience _ subject _ id and the _ GitLab _ session value into the Cookie.
(6) And the Cookie obtained by the simulation Token and the simulation login authentication is combined, so that the automatic authentication, the resource access and the customized development of the expansion function of the platform are completed.
The invention obtains the user authentication information by simulating login and combines with the simulated Token to carry out authentication and authorization of basic operation. On one hand, the problem that the customized and expanded functional API has no authentication information is solved, so that the customized and expanded functional API cannot be normally used; on the other hand, the frequency of manual participation can be reduced, the authentication and simulation processing processes are all automatic, the processing efficiency is improved, and the risk of manual operation is reduced.
The technical features of the above embodiments can be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the above embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.
The above-mentioned embodiments only express several embodiments of the present application, and the description thereof is specific and detailed, but not to be understood as limiting the scope of the invention. It should be noted that, for a person skilled in the art, several variations and modifications can be made without departing from the concept of the present application, which falls within the scope of protection of the present application. Therefore, the protection scope of the present patent shall be subject to the appended claims.

Claims (8)

1. A system automatic authentication and authorization processing method based on a GitLab API is characterized in that login authentication and processing of a user are carried out based on a Security authentication framework, and authentication authority is obtained by combining a simulated login mode, and the method comprises the following specific steps:
step 1, mapping a local account and a GitLab system account, and completing synchronization of user information and operation data by adopting unified user information data of the GitLab system;
step 2, acquiring account information input by a user through a login module, processing a login request, including authentication request filtering and identity construction, and generating a Token corresponding to the user;
and 3, simulating GitLab login to obtain user authentication information, storing the user authentication information in Cookies, and carrying out access and operation on the API corresponding to the GitLab by combining with the Token of the corresponding user so as to realize all functional operation and expansion of the GitLab.
2. The GitLab API-based system automated authentication and authorization processing method according to claim 1, wherein in step 1, mapping is performed between a local account and a GitLab system account, and the GitLab system unified user information data is adopted to complete synchronization of user information and operation data, and the specific method is as follows:
(1) Establishing a user mapping table
Storing the core field of the GitLab user information in a local library table for user login authentication and information synchronization, wherein the structure of the table is as follows:
TABLE 1 user mapping table
Figure FDA0003829967650000011
The username is a legal system username and is consistent with the login name of the GitLab user, password is a secret key for logging in the system and obtaining the GitLab Token, role is a role during the user login and is bound with the system authority, and when the legal Token and the corresponding role are held, the role is used as a certificate to access the GitLab system resource;
(2) User information synchronization
When the user information changes, the GitLab API user interface and the local interface are called to synchronously update the GitLab user information and the local user information, and the consistency of the data of the GitLab user information and the local user information is ensured.
3. The GitLab API-based system automated authentication and authorization processing method according to claim 1, wherein in step 2, the account information input by the user through the login module is obtained, the login request is processed, the authentication request filtering and identity building are included, and the Token corresponding to the user is generated, and the specific method is as follows:
(1) Authentication request filtering
The method adopts a Spring Security framework to carry out user authentication and authorization, controls the access of authority by setting login and access interceptors, further ensures the safety of API access, and mainly carries out the authentication of request resources through the following filters:
1) Usernamespasordauthentination filter: the method mainly takes charge of the authentication of the form;
2) Basicauthenitionnfilte: mainly responsible for default basic authentication of SpringSecurity;
3) Exceptinottransitionfilter: jumping to a corresponding page based on the thrown error;
4) Filter SecurityInterreceptor: a filter class, which determines whether to access the background interface according to the configuration;
(2) Identity construction
In order to ensure the safety of the functional operation of the system platform, different users and roles have different GitLab access authorities, a Token of the corresponding user is generated by simulating the access of the system user name and the password to the GitLab API, and the user accesses other functional APIs of the GitLab based on the Token, namely the operation is carried out by using a GitLab native authority system.
4. The method for automatically authenticating and authorizing the system based on the GitLab API as claimed in claim 1, wherein in the step 2, the GitLab login is simulated to obtain the user authentication information, and the user authentication information is stored in Cookies, and the specific method is as follows: when a browser is used for accessing a webpage, data required for login are constructed, forged data are carried to send a login request, after the server is successfully verified, a Session ID is returned, the Session ID is stored in a Cookie of a client, and the Cookie is carried in each request, so that the conversation state is maintained, and the authentication of user permission and the access of corresponding resources are realized.
5. The gitlb API-based system automated authentication and authorization processing method of claim 1, wherein Cookies and authentication information are cleared when a user logs out.
6. A GitLab API-based system automated authentication and authorization process system, characterized in that a GitLab API-based system automated authentication and authorization process is performed based on the method of any one of claims 1-5.
7. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor when executing the computer program implementing the method of any one of claims 1-5 for a GitLab API based system automated authentication and authorization process.
8. A computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements the method of any of claims 1-5 for a GitLab API based system automated authentication and authorization process.
CN202011368199.5A 2020-11-29 2020-11-29 Automatic system authentication and authorization processing method based on GitLab API Active CN112417403B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011368199.5A CN112417403B (en) 2020-11-29 2020-11-29 Automatic system authentication and authorization processing method based on GitLab API

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011368199.5A CN112417403B (en) 2020-11-29 2020-11-29 Automatic system authentication and authorization processing method based on GitLab API

Publications (2)

Publication Number Publication Date
CN112417403A CN112417403A (en) 2021-02-26
CN112417403B true CN112417403B (en) 2022-11-29

Family

ID=74828796

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011368199.5A Active CN112417403B (en) 2020-11-29 2020-11-29 Automatic system authentication and authorization processing method based on GitLab API

Country Status (1)

Country Link
CN (1) CN112417403B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113938886B (en) * 2021-11-30 2024-04-05 上海派拉软件股份有限公司 Identity authentication platform testing method, device, equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20180302391A1 (en) * 2017-04-12 2018-10-18 Cisco Technology, Inc. System and method for authenticating clients
CN110188049A (en) * 2019-06-10 2019-08-30 北京阿尔山金融科技有限公司 Container Management method, apparatus and electronic equipment
US20200145421A1 (en) * 2018-11-05 2020-05-07 Wistron Corporation Method for authentication and authorization and authentication server using the same
CN111581635A (en) * 2020-05-13 2020-08-25 中国民航信息网络股份有限公司 Data processing method and system

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20180302391A1 (en) * 2017-04-12 2018-10-18 Cisco Technology, Inc. System and method for authenticating clients
US20200145421A1 (en) * 2018-11-05 2020-05-07 Wistron Corporation Method for authentication and authorization and authentication server using the same
CN110188049A (en) * 2019-06-10 2019-08-30 北京阿尔山金融科技有限公司 Container Management method, apparatus and electronic equipment
CN111581635A (en) * 2020-05-13 2020-08-25 中国民航信息网络股份有限公司 Data processing method and system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于Shibboleth的在线实验平台多资源访问认证;张禹等;《计算机应用研究》;20160614;第34卷(第3期);第903-906页 *

Also Published As

Publication number Publication date
CN112417403A (en) 2021-02-26

Similar Documents

Publication Publication Date Title
CN107948167B (en) Single sign-on method and device
TWI725958B (en) Cloud host service authority control method, device and system
TWI400922B (en) Authentication of a principal in a federation
JP6348661B2 (en) Company authentication through third-party authentication support
CN107122674B (en) Access method of oracle database applied to operation and maintenance auditing system
US8209394B2 (en) Device-specific identity
JP7318108B2 (en) Method and system for authenticating secure credential transfer to a device
CN110069908A (en) A kind of authority control method and device of block chain
CN101669128B (en) Cascading authentication system
US20150188779A1 (en) Split-application infrastructure
US9723007B2 (en) Techniques for secure debugging and monitoring
US20130246515A1 (en) Securing asynchronous client server transactions
WO2016173199A1 (en) Mobile application single sign-on method and device
CN103930897A (en) Mobile application, single sign-on management
CN106452782A (en) Method and system for producing a secure communication channel for terminals
JP2016532984A (en) Network connection automation
CN109388937B (en) Single sign-on method and sign-on system for multi-factor identity authentication
WO2014048749A1 (en) Inter-domain single sign-on
CN112600674A (en) User security authentication method and device for front-end and back-end separation system and storage medium
CN112417403B (en) Automatic system authentication and authorization processing method based on GitLab API
CN117251837A (en) System access method and device, electronic equipment and storage medium
Khalil et al. IoT-MAAC: Multiple attribute access control for IoT environments
CN115190483A (en) Method and device for accessing network
CN112422528A (en) Client login method, device, system, electronic equipment and storage medium
CN112738167A (en) File service opening method, device, equipment and medium based on API gateway

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant